Privacy Policy
​
Guardian Risk Training (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy. This Privacy Policy explains how we collect, use and store personal data when you use our website and submit an enquiry through our contact form.
​
We act as the data controller for the information you provide to us.
​
1. Information We Collect
When you submit an enquiry via our website’s contact form, we collect:
-
Full name
-
Email address
-
Telephone number
-
Company name
-
Any information you include in your message to us
We do not collect any personal data automatically through cookies or analytics tools.
​
2. How We Collect Your Information
We only collect personal information that you voluntarily provide when completing the contact form on our website, or through subsequent engagement.
​
3. Why We Use Your Information (Lawful Basis)
We use your information for the following purposes:
-
To respond to your enquiry
-
To communicate with you about our risk training services
-
To keep a record of correspondence
Our lawful bases for processing this data are:
-
Legitimate Interests – to respond to enquiries and operate our business effectively
-
Pre-contractual steps – where your enquiry relates to entering into a contract or receiving information about our services
4. How We Use and Store Your Information
Your enquiry is delivered directly to our email inbox and is stored securely within our email system. We do not use your data for marketing unless you specifically request this. Your information is not used for profiling or automated decision-making.
5. How Long We Keep Your Information
We retain enquiry emails for 3 years from the date of receipt, unless they form part of an ongoing business relationship, in which case they may be kept for longer in accordance with our business records. After this period, emails containing personal data are deleted.
​
6. Who We Share Your Information With
We do not sell or share your personal information with third parties for marketing purposes.
​
Your information may be processed by our:
-
Email hosting provider
-
Website hosting provider
These providers act as data processors and only process data on our behalf and in accordance with our instructions.
We do not transfer your information outside the UK unless required by our hosting or email provider and only where adequate safeguards (such as Standard Contractual Clauses) are in place.
7. Your Data Protection Rights
Under the UK GDPR, you have the right to:
-
Request access to your personal data
-
Request correction of inaccurate data
-
Request deletion of your data
-
Object to or restrict our processing of your data
-
Request that we transfer your data to another organisation
-
Withdraw consent (if consent was previously given)
To exercise any of these rights, please contact me using the details below.
​
8. How to Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data rights, you can contact us using the information at the bottom of this page.
9. Complaints
If you are unhappy with how we handle your personal data, please contact us first so we can resolve the issue.
You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) at:
https://www.ico.org.uk
.jpeg)